For information on installation and setup in an HA environment, submit a case to Technical Support.
This is the version of Network Security prior to the release of 7.04. Version 7.04 introduced Insite web browser support (which replaced the former web server of v6.54 - v7.03). For information on installing the latest version of Network Security, see Installing or Updating Network Security 7 (v7.04).
Network Security requires that you enter a valid license key in order to protect your servers. Contact firstname.lastname@example.org if you need to request a new license key.
It is Powertech’s goal not to change system values on customer systems because we recognize that security-conscious organizations have rigorous change control processes in place for even small changes to system values. Therefore, we ask you to make any system value changes that are needed. However, the Network Security installation process could change a system value to allow the install to proceed if a system value is not set as specified below. If the Installation Wizard changes a system value during install, it changes it back to its original value when the install completes.
To install Powertech Network Security on your system, the following system values that control object restores must be configured as shown.
If you are installing Network Security on a new system that does not yet include IBM's QAUDJRN audit journal, run the command CHGSECAUD to create one automatically. This is the default journal used to record Network Security’s transaction auditing data.
Network Security requires the following:
ShowCase version 18.104.22.168 or greater is required to use Network Security's ShowCase exit points.
Ensure the following servers are available and running prior to installation:
Do the following to perform the installation:
The installation process displays the job log name, user, and job log number. Use the WRKSPLF command to display the job log for complete information on the Network Security install. (The job log file name is JLOGn, where "n" equals a six digit number, e.g. JLOG144620).
To verify that Network Security installed successfully, enter the following command to display the Powertech Network Security window, which shows the release and modification level of the product:
Network Security installs the following product libraries, profiles, authorization lists, commands,objects, and exit points on your system.
|Installed on System||Description|
(All these profiles are set to Password = *NONE so that they can’t be used to sign on to the system.)
Note: The Network Security installation program places these commands in the PTNSLIB/PTNSLIB07 library. They are copied to QGPL when you activate Network Security.
The Network Security Web User Interface (WUI, or Web UI) allows security administrators to work with rules and most other Network Security features directly from a browser. The following browser versions (or later) are required to use Network Security's WUI:
The Web UI is not installed during Network Security's installation procedure, because it is generally only required on the Central Management System.
To install the Web UI, use the following command:
To start/stop the web server job, use these commands:
Start - PTNSSTRWEB
End - PTNSENDWEB
This will start/stop the QP0ZSPWT job with the user of PTWEB in the PTWRKMGT subsystem.
To configure web server ports, and remove the web server, use the following commands:
Configure web server ports - PTNSCFGWEB
Remove web server - PTNSRMVWEB
A feature of Network Security’s Web UI is the Dashboard.
The Dashboard displays a count of all transactions monitored or controlled by Network Security. The Dashboard displays the totals for the servers based upon the criteria selected by the user (today's totals, yesterday's totals, last 7 days or last 30 days). You can also select to see the individual server's counts for the past 24 hours. To activate this feature, start the Dashboard Data Summarization job.
To start/end the Dashboard Data Summarization job, use the following commands:
Start - PNSSTRDASH
End - PNSENDDASH
Execution of the Dashboard Data Summarization job can be controlled with the following commands:
PNSHLDDASH - Use this command, Hold Dashboard Collection, to set the system in a state such that data collection to support the web interface Dashboard will not run.
PNSRLSDASH - Use this command, Release Dashboard Collection, to release the Hold Dashboard Collection command, allowing data collection to occur.
After you install Network Security, see "Activating Powertech Network Security" in the Administrator's Guide for instructions on how to activate Network Security. See the HelpSystems Product Manual page.
The Network Security Administrator's Guide is also installed as part of the product installation in the following directory: C:\Program Files\PowerTech\Network Security
Still have questions? We can help. Submit a case to Technical Support.